A ransomware claim attributed to the actor akira states it will release 116 GB of Hillmann Consulting’s corporate data, including employees’ data such as 250 DLs, passports, SSNs, contracts, financials, HR files, confidential files, and NDAs. The threat notes the data will be uploaded soon, potentially impacting Germany #Germany
Category: Ransom Monitor
A ransomware claim alleges that LeMatic, a US-based leader in automated baking technology, was targeted by the Sinobi threat actor, who demanded payment to restore access to its systems. The claim highlights LeMatic’s AutoOp and AutoEye innovations and notes potential disruption to its client base of bakeries and industrial food producers relying on cutting-edge automation. #unitedstates
Incransom claims to have carried out a ransomware intrusion against distinctive-systems.com, a long-standing provider of management software for coach, bus, and tour operators. The claim describes encryption of critical systems, disrupting Distinctive Systems’ Coach Manager, Tour Booking System, and Vehicle Maintenance System, with alleged ransom demands and potential data exposure.
#Australia
ShinyHunters claim responsibility for a ransomware incident targeting Bumble Inc. in the United States. They allege data exfiltration and threaten to publish stolen information unless a ransom is paid. #UnitedStates
The Tahkout Group, a large Algerian conglomerate spanning automotive, transport, real estate and industrial sectors, was targeted in a ransomware claim attributed to the threat actor tengu. The attackers purportedly gained access, threatened to release stolen data unless demands were met, and said they had disrupted operations in Algeria #Algeria
Summit Global Energy reports a ransomware incident attributed to 0apt, involving a 450GB data dump including offshore drilling maps, tax returns, and board meeting audio. Threat actors threaten to publish or leak the data if demands are not met, indicating potential financial, regulatory, and reputational damage. #Unknown
The claim alleges a ransomware attack by the threat actor moneymessage against Family Partnerships of Central Florida, a US-based nonprofit serving children with special needs, encrypting systems and threatening data exposure unless a ransom was paid. Family Partnerships of Central Florida provides medical, emotional, educational, and social support and emphasizes early intervention to tailor care plans for each child, and the incident purportedly disrupted these services. #UnitedStates
Dr. Smith Dental Clinics reports a ransomware claim by threat actor 0apt, claiming access to 120GB of sensitive data including patient records, X-rays, and insurance claims. The message warns of a last chance to pay and threatens public release of the data if demands are not met. #Unknown
A ransomware claim alleges that the threat actor 0apt breached Orion Legal Partners in the US and exfiltrated 50GB of sensitive data, including court case files, client settlements, and NDAs. The exposed data is described as highly sensitive and could carry significant legal and reputational risk for the firm #UnitedStates
Sinobi claims a ransomware attack against Affordable Housing Management, Inc. (AHM, Inc.), a nonprofit organization dedicated to affordable housing. The attackers threaten to encrypt data or leak sensitive information unless a ransom is paid. #UnitedStates
Impressico Business Solutions in India reports a ransomware claim attributed to the threat actor Sinobi. Impressico Digital, based in Noida, UP, India, provides 360-degree IT solutions to startups and leading enterprises and says the incident was intended to keep clients a step ahead of competitors #India
Threat actor tengu claims to have compromised KSP TLM Indonesia, a large cooperative savings and loan association in Indonesia that focuses on empowering the community economy—especially small and medium-sized female entrepreneurs. The claim frames this as ransomware activity against the victim in Indonesia #Indonesia
The ransomware claim alleges that the threat actor ‘pear’ compromised MMD Insurance Law Advocates in the United States, targeting the firm that represents homeowners, business owners, and condominium associations in insurance disputes. The incident is described as impacting clients nationwide and highlighting ransomware risks facing US-based insurance defense practices. #UnitedStates
According to the ransomware claim, the threat actor nightspire compromised OEC Medical Systems, Inc in the United States and encrypted multiple systems on their network. The claim also states that data was exfiltrated and a ransom was demanded for decryption and non-disclosure. #UnitedStates
The Trevino Group, Inc., in the United States, reports a ransom claim by the actor incransom, who purports to have collected confidential documents, client data, NDA documents, financial data, operations information, corporate data, business agreements, drawings, and other highly sensitive materials. The actor threatens to publish or monetize the data unless a ransom is paid #UnitedStates